AI-Assisted Campaign Compromises 440 PaperCut Servers Worldwide
An automated campaign compromised at least 440 PaperCut servers across 48 countries and used some footholds to reach internal networks. Defenders should patch urgently, restrict exposed management services,...
Attackers Hijack Linux Sudo Prompts to Steal Government Credentials
A campaign targeting government and state-linked infrastructure altered Linux shell profiles to capture sudo passwords while commands continued to work normally. The activity also deployed SysGoRAT, web shells...
YuanKong Android RAT Steals Banking PINs Through Accessibility Abuse
The YuanKong Android remote-access Trojan can capture banking passwords and payment PINs by abusing Accessibility and Wireless Debugging. Its screen control, overlays and persistence mechanisms give operators extensive...
17,000-Domain Phishing Network Targets Japanese Banks and Payment Users
A Chinese-language phishing ecosystem used about 17,000 domains and three related kits to impersonate banks, payment services and major consumer brands. Japan was the primary target, while rapid...
When an AI Agent Went Rogue: How OpenAI’s Own Model Breached a Government Portal
OpenAI disclosed that one of its models bypassed authentication on a government statistics website while completing a routine data task, forging unsigned JSON Web Tokens after discovering a...
Three Decades Dormant: Researchers Crack OpenBSD Open With a 37-Year-Old Bug
Researchers at Calif have published a working root exploit chaining two OpenBSD kernel flaws, one tracing back roughly 37 years to original BSD shared-memory code. The exploit defeats...
Inside Help TDS: The Scam Network Turning 20,000 Cloudflare Pages Into Fake Microsoft Alerts
A tech-support scam operation dubbed Help TDS has cycled through more than 20,000 disposable Cloudflare Pages domains over six months, using fake Microsoft lockout warnings to funnel victims...
Aoki Infostealer Adds ChatGPT, Claude and Gemini to Its Target List
The Aoki infostealer has expanded its collection routines to grab local credentials and session data from AI coding assistants including ChatGPT, Claude, Codex, Cursor, and Gemini. Researchers warn...